Operator of the service: baxet.pl ( the “Service”) is Baxet Sp. z o.o. based in Krakow (31-051), Berka Joselewicza 9/19 street, entered into the Register of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under KRS number: 0000707999, NIP: PL6762541306, REGON: _________, e-mail: __________ (the “Operator”).
The Operator is the data controller of the personal data of the Service Users.
All personal data is gathered, processed and used by the Operator in accordance with the rules set out in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“RODO”).
The Operator gathers, processes and uses personal data of the Service Users in order to implement the agreements – process all activities related to the sales and deliveries of products ordered via the Service, returns and warranty (the legal basis of processing personal data of Users provides: Art (1) (b) RODO) and answer Users for the questions about the products or services (the legal basis: Art. 6 (1) (f) RODO). The legal basis or processing personal data are also in some cases special legal provisions that allow the Operator to process personal data in order to fulfill a legal obligation – for example accounting and tax regulations (the legal basis: Art. 6 (1) (c) RODO).
The legal basis or processing personal data in order to send Users marketing materials – newsletter is the consent of the User (the legal basis: Art. 6 (1) (a) RODO). User has the right to opt out of receiving the newsletter at any time. Requests may be sent to the Operator at the contact information set out above. The withdrawal of consent does not affect the lawfulness of the data processing which has been made on the basis of consent before its withdrawal.
The Operator collects following types of personal data from its Users:
when the User makes the order using the Service: e-mail address, first name, last name, password, address, address of delivery, telephone number, information about orders, bank account number;
when the User signs up for the newsletter: e-mail address.
The Operator requires the User to provide personal data that is necessary to perform the agreement. Refusal of providing personal data may make it impossible to perform the agreement. If it is required by law, for example tax regulations, the Operator may also require providing other necessary data. In other cases, providing personal data is voluntary.
The Operator attaches special importance to protect privacy of the Users and takes appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the processed personal data.
The Operator exercises continuous control over the processing of personal data and restricts access to them. The Operator will not sell, share or otherwise distribute the personal data of the Users to third parties. The Operator will not transfer the personal data to countries outside of the European Union. The Operator may only entrust data processing without the change of the hereinabove indicated aim of its processing, to the entities who act for or on behalf of the Operator, who perform the following services: website and IT support services, payment services, e-mail marketing services, courier and postal services, data storage services including cloud computing, accounting. These third parties have contracted with the Operator to only use personal data for the agreed upon purpose, and not to sell or disclose personal data to any third parties.
Personal data will be processed and stored only for the period that is necessary for the proper performance of the services, pursuing claims in connection with the performance of the services, and for the period that is necessary for the obligations arising out of the provisions of law (for example to fulfill the accounting and tax obligations – 5 years). For marketing purposes, the data will be processed and stored for the duration of the contract or until the User notifies the Operator objection to such processing of personal data.
Personal data are not subject to profiling as one of forms of automatic processing of personal data.
Each User has the right to access, correct, modify or delete his personal data, the right to request restriction of processing of his data, the right to data portability and the right to notify objection to the processing of personal data. Requests may be sent to the Operator at the contact information set out above.
Each User has the right to lodge a complaint to the General Personal Data Protection Officer (Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Polska, website: http://www.uodo.gov.pl/) as regards processing of personal data by the Operator.